Always send Content-Disposition: attachment header to force download